This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3438203d3e20323634373630.roa
File:                     323830333a323063303a3a2f33322d3438203d3e20323634373630.roa (raw, json)
Hash identifier:          eLwWkA0EKmBfdWAyHfyz2vbAa04Xx5WEDiEIxs3F4uI=
Subject key identifier:   C3:8A:FE:33:18:44:EF:D5:AC:68:79:E1:EE:F4:AB:DC:25:8C:A1:7E
Certificate issuer:       /CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
Certificate serial:       4F9340C1EBE877BE7642E588ED86A95B927BDD3B
Authority key identifier: 88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3438203d3e20323634373630.roa
Signing time:             Tue 06 Jan 2026 19:31:36 +0000
ROA not before:           Tue 06 Jan 2026 19:26:36 +0000
ROA not after:            Tue 05 Jan 2027 19:31:36 +0000
asID:                     264760
IP address blocks:        2803:20c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:93:40:c1:eb:e8:77:be:76:42:e5:88:ed:86:a9:5b:92:7b:dd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
        Validity
            Not Before: Jan  6 19:26:36 2026 GMT
            Not After : Jan  5 19:31:36 2027 GMT
        Subject: CN=C38AFE331844EFD5AC6879E1EEF4ABDC258CA17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:0a:ec:3c:87:89:a6:3e:7f:d8:8f:18:df:
                    07:7a:80:13:40:d6:28:e0:78:2f:ce:dd:32:d4:30:
                    6d:bf:ae:f2:da:08:e9:fd:cc:bf:fa:87:e7:7e:90:
                    b7:e3:b3:98:43:a5:e9:81:9e:53:a4:2e:a8:38:d1:
                    00:4c:84:66:eb:20:ef:eb:bd:8f:72:f8:48:02:52:
                    de:0b:f3:6a:81:fb:6b:88:8f:15:eb:57:c0:83:b1:
                    aa:60:34:f0:16:f2:2c:51:f8:36:ac:d3:1d:44:66:
                    01:29:37:a0:00:23:5f:40:f5:4f:bc:56:f7:ff:82:
                    cb:a4:4c:69:5c:67:cd:58:01:1b:6a:c0:2a:9e:79:
                    92:59:6d:51:c4:7d:6e:b0:ac:0e:99:55:5c:ff:26:
                    79:c1:d6:b0:3f:1e:6c:a8:d5:2b:aa:fc:f1:49:c2:
                    cc:e3:f7:f5:e3:16:d1:b7:de:58:8e:5f:8d:2b:b3:
                    90:cf:52:5b:19:2d:51:35:d5:e8:1a:cf:43:fb:29:
                    eb:1a:13:04:cc:5d:fc:73:b9:ae:f7:bc:31:6e:33:
                    ca:9a:b9:ca:05:5b:fe:76:3d:19:59:7d:ee:31:b9:
                    af:7e:ba:d9:79:75:13:2a:e2:5f:c2:90:2a:59:3e:
                    b9:f5:72:c4:9b:8b:f0:0e:d6:80:e7:3f:9c:4a:b6:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:FE:33:18:44:EF:D5:AC:68:79:E1:EE:F4:AB:DC:25:8C:A1:7E
            X509v3 Authority Key Identifier:
                keyid:88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3438203d3e20323634373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:93:2b:f2:c1:0f:55:9b:1a:60:34:cd:ba:da:fd:2a:f5:a6:
         0a:a2:f1:10:14:44:29:49:88:16:ee:a7:c9:c2:9d:47:15:ee:
         f5:2c:4c:ef:85:51:cf:ff:2f:37:7e:d5:98:86:d4:e6:49:64:
         26:dd:dc:58:7e:bc:f9:c0:de:a8:5b:ed:31:0d:55:a2:58:47:
         ff:07:2b:64:34:8b:6c:27:a0:3b:df:6b:9f:4e:26:b2:5f:8c:
         f5:5c:6b:43:06:b5:fa:15:e0:9d:23:6f:4e:ee:37:fe:66:93:
         6e:02:ab:88:07:57:8b:58:7c:25:be:28:d4:d2:12:cb:7c:cb:
         69:ef:92:15:41:aa:7c:51:50:e4:b4:ca:11:6c:a5:67:41:65:
         09:1d:56:77:f3:59:af:76:bf:69:7d:91:6e:31:30:69:df:52:
         0d:e9:5e:9f:6c:b0:47:cb:f5:09:15:22:0d:fd:f3:7e:e6:6c:
         b8:29:ef:b7:56:6a:85:e1:b9:7d:e1:38:b2:a9:8d:06:0f:ff:
         97:b1:fd:f9:da:1d:93:23:cd:47:c4:88:6b:15:d8:d2:2c:5f:
         aa:f2:e3:0b:cc:5f:b5:a7:18:2e:ed:b5:2e:29:60:18:cb:86:
         8c:f8:12:be:88:fa:c2:9c:bd:78:f9:2b:8f:b2:c5:8a:7d:0f:
         b5:b1:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:35 2026 by rpki-client